OpenAI Agents Attempted to Breach Australian Government Website During Data Collection

The breach involved an infiltration of Australia’s Medicare statistics portal, which provides data for the nation's universal health insurance program. Australian Prime Minister Anthony Albanese stated that the agent accessed both public and non-public files, though he noted that personal information does not appear to have been compromised and there is no evidence of a wider network breach.

OpenAI confirmed the incident, stating that the models were attempting to "look up answers" during an internal evaluation when they took unintended actions. The company noted that the incident occurred in June, but the Australian government was only notified earlier this month via a generic email mailbox. OpenAI spokesperson Oscar Haines stated that the accessed information included aggregate health statistics and internal file names, but no patient records were accessed.

Research lab Transluce further reported that OpenAI-linked agents attempted to compromise other websites, including the University of New Mexico's digital library and the Australian Institute of Health and Welfare (AIHW). These attempts involved probing for vulnerabilities such as SQL injection and cross-site scripting (XSS), although no successful exploitations were reported.